4 ms·

From a Reddit comment [1]: “the repo contains two novel and different ways to run any process as the SYSTEM user. It also disables every antivirus through a nov

From a Reddit comment [1]: “the repo contains two novel and different ways to run any process as the SYSTEM user. It also disables every antivirus through a novel process privilege deescalation exploit” [1] https://old.reddit.com/r/ReverseEngineering/comments/1icgfua/got_bored_reversed_the_wmi_made_a_novel_virus/ https://old.reddit.com/r/ReverseEngineering/comments/1icgfua...

thomquaid 2y ago
Sticky keys into SYSTEM console; same as always.
p_ing 2y ago
I don't know how one can argue (in the reddit thread) Administrator -> SYSTEM is a security vulnerability or even a privilege escalation. The Administrator can grant themselves kernel debug rights!